Your privacy comes first.

We collect few data, we protect them and we do not sell them. Below: which data we process, for what purpose and for how long.

What the client receives

The client receives the answers and a profile — «doctor, 40-55, Northern Italy» — never the name or the contact details. Before every delivery a filter removes data that can identify the person, including data entered in the answers.

Retention of conversations

Interview conversations are kept in Humatic systems, encrypted, for a declared retention period. Purpose: to demonstrate that the answers are genuine. When the period expires, they are deleted.

Who can access the conversations

Access to conversations is limited to the people and systems required for verification and delivery. Every access is logged.

Use of the phone number

One thing only: sending you notifications when an interview is available. We do not verify it and it is not your identifier: what guarantees one account per person is the document verification. It is not shared with third parties and is not used for other purposes.

Who sees your data besides us

Didit (European Union — didit.me) carries out identity document verification on our behalf: it receives the images of the document, the selfie and the session videos, keeps them for one month and then deletes them. What remains with Humatic is only the outcome and an irreversible code. For everything else we rely on selected companies, bound by contract and authorised to process your data only according to our instructions: infrastructure and storage (European Union), email delivery (European Union), access to your account (United States), artificial intelligence models that conduct and assess the interview (United States), site measurement (United States, only with your consent). For the United States companies, the transfer takes place on the bases provided for by European law. The client receives the answers without name or contact details. The full list of companies is available on request by writing to privacy@humatic.work.

Why we process your data

To give you the service: creating the account, inviting you, running the interview, paying you. Because the law requires it: keeping the proof of consents and the accounting records. For legitimate interest: defending the system from fake sign-ups, demonstrating that the answers are genuine, keeping your profile up to date with what comes out of the interviews. With your consent: site measurement and sensitive topics when an interview needs to discuss them. Every profile entry shows where it comes from and can be deleted from your area. Health information does not enter the profile.

Which data is mandatory

Email, phone number and identity document are necessary. The email is how you get into your account; the phone is how we notify you when there is an interview; the document is what guarantees that behind every account there is one person, once — it is what makes our group of people available for interviews different from the others. If you do not provide them, sign-up cannot be completed. The optional profile questions are genuinely optional: not answering excludes you from nothing — it only reduces the number of studies you come up as a match for.

The interview is conducted by an AI

You are interviewed by a model, not a person. A second system assesses whether the answers are genuine, and payment depends on that assessment. If a judgement concerns you, you have the right to ask that a person look at it: write to privacy@humatic.work. Before anyone is excluded from the platform, human review always takes place — not on request.

The brake against abuse

To protect the service, our server counts how many requests arrive from the same network address within a few minutes: anyone making too many is made to wait. The address used for that count lives in temporary memory and disappears within minutes.

Server logs

Our servers record every request received: network address, page, date and time. Logs are retained for no longer than twelve months.

Your rights

Account deletion: from your area, whenever you want. Your profile disappears and we stop contacting you; a copy without your name is kept for the period required by law, then deleted.
A copy of your data: request it by writing to privacy@humatic.work.
Withdrawal of consents: request it by writing to privacy@humatic.work.
Complaint: if you believe we are handling your data improperly, you can address the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Cookies, and the other things left in your browser

Below is the full list, with duration and purpose. Items necessary for the site to work cannot be refused. The others require consent and can be withdrawn at any time.

client, client_uat, __session, clerk_active_context and their instance-suffixed variants

Set by Clerk, the authentication service. They maintain the session after sign-in and let the site recognise you on every page: that is how you see your profile and the way out at the top. Duration: 399 days. No consent required: they are necessary for authentication.

__cf_bm and _cfuvid

Set by Cloudflare to protect sign-in from automated traffic. Duration: less than one day, or the browser session. No consent required: they are necessary for the security of the service.

hm_visita and hm_contesto

Set by Humatic. They contain a random visit identifier and the campaign of origin; they measure sign-up completion. Duration: the browser session. The data remains on Humatic systems and is not transmitted to third parties.

humatic.funnel.uscito

Set by Humatic. It records whether a measurement event left the browser and with what outcome, to understand where data is lost. It keeps at most the last fifty lines. Duration: the browser session. The data remains on Humatic systems and is not transmitted to third parties.

hm_consenso

Records the choice made in the banner, so it is not shown again on every page. It also applies when consent is refused. Duration: until you withdraw it from this page or clear your browser data.

Google Analytics

Active only with consent. Measures how the pages are used. Without consent the script is not loaded. Duration of its cookies: up to two years, under Google's default setting. Consent can be withdrawn at any time from this page.

This site doesn't track you

We do not use advertising pixels and we do not build marketing profiles. No data is sold or shared with advertising operators. To measure how the pages are used we employ Google Analytics, subject to consent: Google's advertising features are disabled. Consent can be withdrawn at any time from this page.